zitadel/internal/crypto
Tim Möhlmann dc170dc46e
feat(crypto): support md5 plain for imported password hashes (#8189)
# Which Problems Are Solved

Allow verification of imported passwords hashed with plain md5, without
salt. These are password digests typically created by one of:

- `printf "password" | md5sum` on most linux systems.
- PHP's `md5("password")`
- Python3's `hashlib.md5(b"password").hexdigest()`

# How the Problems Are Solved

- Upgrade passwap to
[v0.6.0](https://github.com/zitadel/passwap/releases/tag/v0.6.0)
- Add md5plain as a new verfier option in `defaults.yaml`

# Additional Changes

- Updated documentation to explain difference between `md5` (crypt) and
`md5plain` verifiers.

# Additional Context

- Requested by customer for import case
2024-06-25 11:10:49 +03:00
..
database fix(db): wrap BeginTx in spans to get acquire metrics (#7689) 2024-04-03 11:48:24 +03:00
file chore(v2): move to new org (#3499) 2022-04-26 23:01:45 +00:00
aes_test.go refactor(fmt): run gci on complete project (#7557) 2024-04-03 10:43:43 +00:00
aes.go refactor: rename package errors to zerrors (#7039) 2023-12-08 15:30:55 +01:00
code_mock.go feat(crypto): use passwap for machine and app secrets (#7657) 2024-04-05 09:35:49 +00:00
code_mocker.go feat(crypto): use passwap for machine and app secrets (#7657) 2024-04-05 09:35:49 +00:00
code_test.go feat(crypto): use passwap for machine and app secrets (#7657) 2024-04-05 09:35:49 +00:00
code.go feat(crypto): use passwap for machine and app secrets (#7657) 2024-04-05 09:35:49 +00:00
crypto_mock.go feat(crypto): use passwap for machine and app secrets (#7657) 2024-04-05 09:35:49 +00:00
crypto_test.go feat(crypto): use passwap for machine and app secrets (#7657) 2024-04-05 09:35:49 +00:00
crypto.go feat(crypto): use passwap for machine and app secrets (#7657) 2024-04-05 09:35:49 +00:00
generate.go refactor crypto tests 2020-03-30 11:26:02 +02:00
key_storage.go fix(db): always use begin tx (#7142) 2024-01-04 16:12:20 +00:00
key.go refactor: rename package errors to zerrors (#7039) 2023-12-08 15:30:55 +01:00
passwap_test.go feat(crypto): use passwap for machine and app secrets (#7657) 2024-04-05 09:35:49 +00:00
passwap.go feat(crypto): support md5 plain for imported password hashes (#8189) 2024-06-25 11:10:49 +03:00
rsa.go feat(cmd): mirror (#7004) 2024-05-30 09:35:30 +00:00